Mobile wlan gateway

ABSTRACT

A technique for operating a mobile station as wireless local-area network [“WLAN”] gateway. The mobile station is provided with a gateway application to control the following operations: activating ( 3 - 0 ) the WLAN means as a WLAN base station capable of communicating with at least one WLAN terminal over a WLAN network; creating a network identifier ( 3 - 2, 3 - 4 ) for the WLAN base station; assigning ( 3 - 8, 3 - 10 ) an internet protocol address for the at least one WLAN terminal; resolving domain name service [“DNS”] queries ( 3 - 12 . . . 3 - 18 ) in cooperation with an external DNS service system; assigning at least one port number for each protocol supported by the gateway application; and tunneling internet traffic ( 3 - 30 . . . 3 - 36 ) between the at least one WLAN terminal and an internet host over the broadband connection.

CROSS-REFERENCE TO RELATED APPLICATIONS

This application is a continuation of U.S. patent application Ser. No.13/240,419, filed on Sep. 22, 2011. U.S. patent application Ser. No.13/240,419 is a continuation of U.S. patent application Ser. No.12/264,726, filed on Nov. 4, 2008, now U.S. Pat. No. 8,064,417. U.S.Pat. No. 8,064,417 claims priority from Finland Patent Application No.20080032, filed on Jan. 16, 2008. The contents of the aforementionedpatent applications are hereby incorporated by reference in theirentireties.

FIELD OF THE INVENTION

The invention relates to methods, apparatuses and software products forproviding a wireless broadband internet connection via a mobilecommunication network. In the context of the present invention, abroadband connection means a connection capable of transmitting traffic,in good network conditions, faster than a V.90 modem can, or faster than64 kilobits per second.

BACKGROUND OF THE INVENTION

Wireless broadband modems can be used to couple personal computers orclient terminals to the internet in places where wired internetconnections or local-area networks are not available. Prior art wirelessbroadband modems exhibit certain problems. For instance, sharing asingle wireless broadband connection among several users (clientterminals) is awkward at best. Normally this requires setting up one ofseveral client terminals as a master terminal that provides the internetconnection to the remaining client terminals. This process consumesresources of the master terminal and the client terminals cannot operatewithout the master. The difficulty of sharing a single wirelessbroadband connection among several users is understandable in view ofthe fact that most wireless broadband modems are given or sold at anominal cost by mobile network operators in connection with a networksubscription. The network operators' obvious desire is to sell asubscription to each user instead of sharing a single connection amongseveral users.

Another problem of prior art wireless broadband modems is the fact thatmost of them are “wireless” only towards the mobile network and theconnection to the client terminal takes place via a USB cable. The wiredconnection is actually a benefit in connection with fixed clientterminals, such as home computers, because the wired connection can alsosupply power to the wireless broadband modem, but in connection withmobile client terminals, the wired nature of the USB connection is adefinite handicap.

BRIEF DESCRIPTION OF THE INVENTION

An object of the present invention is to develop a method, an apparatusand software products so as to alleviate one or more of the problemsidentified above. The object is achieved by methods, apparatuses andsoftware products as defined in the attached independent claims. Thedependent claims and the drawings with their associated descriptionsrelate to specific embodiments.

An aspect of the invention is a method for operating mobile station aswireless local-area network (“WLAN”) gateway. The mobile stationcomprises a memory for storing applications and data; a processor forexecuting the stored applications; a user interface comprising an inputsection and an output section; reception/transmission circuitry forproviding a communication interface to one or more access networks;authentication means operable to authenticate a user of the mobilestation; a radio transceiver operable to establish and maintain abroadband connection with a mobile communication network in response toa successful authentication of the user of the mobile station; andwireless WLAN means responsive to an activation or deactivation commandaccording to a setting received via the input section of the userinterface. The inventive method comprises instructing the processor by agateway application to control the following operations:

-   -   activating the WLAN means as a WLAN base station capable of        communicating with at least one WLAN terminal over a WLAN        network;    -   creating a network identifier for the WLAN base station;    -   assigning an internet protocol address for the at least one WLAN        terminal;    -   resolving domain name service (“DNS”) queries in cooperation        with an external DNS service system;    -   assigning at least one port number for each protocol supported        by the gateway application; and    -   tunneling internet traffic between the at least one WLAN        terminal and an internet host over the broadband connection.

Another aspect of the invention is gateway application implemented as asoftware product which comprises a code portion for instructing themobile station's processor to control the mobile station to perform eachof the six above-defined operations. Yet another aspect of the inventionis a mobile station which comprises the inventive gateway application,either as a factory-installed application or as a downloadableapplication.

In one specific embodiment the mobile station further comprises meansfor receiving, installing and executing downloadable programs and theinventive gateway application is a downloadable application.Implementing the inventive gateway application as a downloadableapplication provides the added benefit that the inventive technique isapplicable to mobile stations which are physically capable of performingthe inventive method but do not contain the necessary software.

In another specific embodiment the gateway application further comprisesa code portion to redirect a first HTTP page request from each mobilestation during an internet session to a predetermined internet address.Redirecting the mobile station's first HTTP page request during aninternet session provides the owner of the predetermined internetaddress with the benefit that the mobile station user must begin aninternet session via the predetermined internet address. That addressmay contain useful information or advertisements, for example.

Yet another specific embodiment is a gateway application for a mobilestation, wherein the mobile station comprises a GPS receiver or othermeans for determining the mobile station's location, and the gatewayapplication comprises a code portion for associating the determinedlocation to the tunnelled internet traffic. The gateway applicationand/or some internet-based supplementary server(s) may use thedetermined location to produce one or more additional or supplementaryservices to the WLAN terminal.

The gateway application may further comprise a code portion forcollecting traffic statistics in respect of the tunnelled traffic andfor transmitting at least some of the collected traffic statistics to anadvertising server and/or billing server, so as to use the trafficstatistics for advertising and/or billing.

BRIEF DESCRIPTION OF THE DRAWINGS

In the following the invention will be described in greater detail bymeans of specific embodiments with reference to the attached drawings,in which

FIG. 1 is a schematic block diagram of a representative mobile station;

FIG. 2 shows some preparatory acts, some of which may be optional;

FIG. 3 shows an illustrative scenario involving a client terminal and amobile station which supports a gateway application according to thepresent invention;

FIG. 4 shows an embodiment in which the gateway application in themobile station is activated automatically in response to detection of anearby WLAN client terminal; and

FIG. 5 shows an embodiment in which the mobile station'slocation-determination functionality is used to enhance image uploadingto an image hosting server.

DETAILED DESCRIPTION OF SPECIFIC EMBODIMENTS

FIG. 1 is a schematic block diagram of a representative mobile stationMS. The mobile station MS comprises a central processing unit CP 105 andmemory 110. In addition, the mobile station MS comprises or utilizesexternal input-output circuitry 115 which constitutes the multimodeterminal's user interface and comprises an input circuitry 120 and anoutput circuitry 125. The input circuitry 120 comprises the mobilestation's microphone and user-input device, such as a keypad and/ortouch screen. The output circuitry 125 comprises the mobile station'sdisplay and earphone or loudspeaker. The mobile station MS furthercomprises reception/transmission circuitry 130 which comprises atransmission circuitry 135, reception circuitry 140 and antenna 145. Asubscriber identity module, SIM, 150 is used by an authenticationfunction 160 to authenticate the mobile station user and to identify theuser's subscription to the access network. The mobile station alsocomprises WLAN (Wireless Local Area Network) circuitry 155 whose normalmode of usage is acting as a WLAN client to a WLAN base station (notshown).

In order to support installable program modules, the mobile station'smemory MEM 110 may comprise routines for downloading installable programmodules and for storing the installable program modules in the memoryMEM for execution by the central processing unit CP. FIG. 1 shows anarrangement in which the mobile station is configured to downloadinstallable program modules from a repository RP via a data network DN,an access network AN, the antenna 145 and reception circuitry 140,although other arrangements are equally possible, such as downloadingthe installable program modules via the data network DN to a personalcomputer PC, from which the installable program modules are transferredto the mobile station the WLAN circuitry 155 or via some othershort-range connection, such as Bluetooth or Universal Serial Bus (USB,not shown separately). The reference sign PC/CT means that the personalcomputer PC serves as an example of a client terminal CT. The accessnetwork AN is typically a broadband-capable mobile communicationnetwork, while the data network DN is typically the internet or someclosed subnetwork implementing internet protocol (IP), commonly calledintranets or extranets. At this level of generalization, allpreviously-discussed elements of FIG. 1 can be conventional as used inthe relevant art. One or more external hosts 190 are accessible via theaccess network AN and data network DN, as will be described in moredetail below. Finally, reference numeral 180 denotes an area of thememory 110 used to store parameters and variables.

The foregoing description of FIG. 1 describes an applicable mobilestation in technical terms. Such mobile stations are commerciallyavailable: For instance, at the priority date of the present invention,mobile stations based on Symbian S60 or S80 platforms can be used,provided that they support WLAN and broadband communications. Adeparture from prior art mobile stations can be seen in the fact thatthe mobile station comprises the inventive gateway application 170,either as a factory-installed software application or as a downloadableapplication. The reference sign PC, which denotes the personal computerbeing used as the client terminal, is derived from “personal computer”,but those skilled in the art will realize that the mobile station MSprovided with the inventive gateway application 170 supports virtuallyany client terminal capable of acting as a WLAN client, such as laptopcomputers, smart telephones, personal digital assistants, homeentertainment devices, digital cameras, etc., to name just arepresentative sample of applicable device types.

FIG. 2 shows some preparatory acts, some of which may not be necessaryin all embodiments of the present invention. In step 2-2 the mobilestation MS is authenticated. This step, which is well known to thoseskilled in the art, involves reception of a PIN code via the mobilestation's user interface, and using the mobile stations SIM card in aregistration process to the access network AN. In step 2-4 the mobilestation's WLAN circuitry is activated according to a setting from themobile station's user interface. In steps 2-6 through 2-8 the inventivegateway application is downloaded via a personal computer PC from therepository RP. In cases wherein the gateway application is downloadedwithout the personal computer, the download request and applicationdownload would take place directly between the mobile station MS and therepository RP. In step 2-10 the downloaded gateway application is storedin the mobile station's memory for later execution, as will be furtherdescribed in connection with FIG. 3.

The WLAN activation step may not be necessary if the mobile station'sWLAN circuitry is permanently enabled. The downloading and storing actsmay be omitted in embodiments having the gateway application permanentlystored or pre-installed in the mobile station's memory.

FIG. 3 depicts an illustrative scenario involving a client terminal(represented in FIG. 3 by a personal computer PC) and a mobile stationwhich supports a gateway application according to the present invention.In step 3-0 the inventive gateway application is executed in the mobilestation. The execution of the gateway application is typically startedin response to a user instruction via the mobile station's userinterface. In a typical implementation, the mobile station receives userinterface navigation instructions to “Applications” from which theinventive gateway application is selected for execution. One of the actsperformed by the mobile station's processor, under control of theinventive gateway application, is to ensure that the WLAN circuitry ofthe mobile station is operational. The significance of step 3-0, and ofthe corresponding deactivation step 3-40, is that the mobile station isonly reserved for wireless broadband gateway applications for auser-specified time, and at other times the mobile station can performwhatever tasks required by its user.

In step 3-2 the gateway application instructs the mobile station'sprocessor to prepare an ad-hoc WLAN network around the mobile station,by acting as a WLAN base station (as opposed to the mobile station'smore conventional usage as a WLAN client). In step 3-4 the gatewayapplication instructs the mobile station to initiate broadcasting of abeacon ID message, which typically is an IBSSID message as defined instandard IEEE 802.11x. Step 3-4 is depicted as an arrow, but in practicethe broadcasting of the beacon ID message should be repeated until step3-40 in which the execution of the gateway application is terminated.

In step 3-6 the client terminal PC searches for available WLAN networksand detects the broadcasted beacon ID and selects the WLAN networkcreated by the mobile station MS. In step 3-8 the client terminal PC, aspart of a conventional WLAN attach procedure, requests an IP addressfrom the mobile station's WLAN base station, which returns the requestedIP address in step 3-10. Dynamic Host Configuration Protocol (DHCP) istypically used for steps 3-8 and 3-10.

Let us assume that the client terminal PC tries to retrieve a web pagefrom the internet host (item 190 in FIG. 1). In step 3-12 the clientterminal PC sends a domain name service (DNS) query for the IP addressof the host's web page to the DNS server of the mobile station's gatewayapplication. In step 3-14 the mobile station's gateway applicationforwards the DNS query to internet's domain name service and obtains thehost's IP address in step 3-16. In step 3-18 the mobile station'sgateway application returns the host's IP address to the client terminalPC.

In step 3-20 the client terminal PC requests a web page from the host'sIP address. Hypertext Transfer Protocol (HTTP) is typically used forthis purpose. This request, like any communication between the clientterminal PC and any internet hosts, takes place via the inventivegateway application being executed in the mobile station. Step 3-22 isan optional step which may be omitted in some embodiments. Whenperformed, step 3-22 comprises redirecting the first HTTP page requestfrom client terminal PC to another internet host, called Host'. Thismeans that in step 3-24 the gateway application forces the clientterminal's first HTTP page request to a forced home page at the IPaddress of Host'. For example, the operator of the site Host' maydisplay advertisements in exchange of sponsoring communication costsover the access network AN. In step 3-26 the web site Host' returns therequested web page, which the gateway application relays to the clientterminal PC in step 3-28.

In step 3-30 the client terminal PC again requests the web page from thehost's IP address. Since this the second (or further) page request fromthe client terminal, the gateway application no longer redirects theHTTP request but relays it to the Host in step 3-32. In steps 3-34 and3-36 the requested web page from the Host is transmitted to the clientterminal. As shown by arrow 30, the process can return from step 3-36 tostep 3-20 when future web pages are requested. The loops 3-30 through3-36 can be repeated until the gateway application is terminated in step3-40. If the forced home page feature (step 3-22) is not implemented,the first HTTP request (step 3-20) is processed similarly to thesubsequent HTTP requests (step 3-30). In subsequent executions of step3-30, if the HTTP page request relates to a web page for which thegateway application does not have an IP address, a DSN query will beperformed (cf. steps 3-14 and 3-16).

FIG. 3 also shown an additional client terminal, denoted PC'. Steps 3-6through 3-36 will be repeated for each additional client terminal. Thismeans that by virtue of the inventive gateway application, whichinstructs the mobile station MS to act as a WLAN base station (asopposed to a WLAN client), the mobile station MS can support anarbitrary number of client terminals which act as WLAN client terminalsand which, by virtue of the authentication performed by the mobilestation, can share a single subscription to the access network.

FIG. 3 and the foregoing description of it illustrate use of HTTPprotocol. The inventive gateway application supports other protocols inan analogous manner and assigns a specific port number to each supportedprotocol. For instance, the gateway application can instruct the mobilestation to convey encrypted HTTPS traffic by utilizing the ProxyConfiguration field of HTTPS protocol.

In addition to merely conveying internet traffic between the clientterminal PC and the internet host, the inventive gateway applicationcan, in some specific embodiments, provide additional or supplementaryservices which utilize some of the functionality of modem mobilestations. In some implementations, such supplementary services areprovided by an arrangement in which a supplementary server enhances theservice(s) provided by a primary server. Such a supplementary server canbe part of the functionality of the inventive WLAN gateway application,or it can be implemented as a network element distinct from the primaryserver.

One exemplary implementation of such additional services involvesutilization of GPS (Global Positioning System) devices incorporated intosome mobile stations. The inventive gateway application may be enhancedto associate GPS-provided geographical coordinates to the PC-to-hosttraffic, or some of that traffic. For instance, the gateway applicationcan tag still or video image data with geographical coordinates and/oruse some additional service (not shown separately) that maps the withgeographical coordinates to a plaintext name of the relevant location.In another implementation the gateway application associatesGPS-provided coordinates to the traffic, or some of it, while the actualtagging of the images with the coordinates is provided by someadditional server, such as an image sharing server (not shownseparately). Actually, what matters is the location of the clientterminal and not the location of the mobile station acting as a WLANgateway. But considering the short range of the mobile station's WLANtransmission, the mobile station's location can be used as the clientterminal's location for virtually all practical purposes.

In a more ambitious implementation, the gateway application can provideadditional services on the basis of the geographical coordinates. Forinstance, the gateway application can recognize various queriesinitiated by the client terminal and/or responses to those queries byinternet servers and enhance the query responses by relevant map orphotography information. For instance, the gateway application candetect a query to “post” and provide the query response with a mapand/or photograph of the post office closest to the mobile station'sGPS-provided geographical coordinates. In order to obtain the map and/orphotograph, the gateway application may query a supplementary serverwhich provides the requested functionality.

Another example of such additional services relates to trafficstatistics which the gateway application collects and transmits to someinternet-based supplementary server (not shown separately). For example,such a supplementary server may use the traffic statistics to monitorQuality of Service (QoS) parameters, which can be used to maintain theQoS at a specified level and/or to optimize resource usage in the accessnetwork. In some embodiments the supplementary server is an advertisingserver. The advertising server may utilize the traffic statistics fortargeted or tailored advertising to the client terminal PC. Such trafficstatistics may include, for example, user identification, usage (amountof traffic, usage times, internet addresses visited, query parameters,or the like). Alternatively or additionally, the gateway application cantransmit traffic statistics to a billing server which participates incharging the client terminal's subscriber. Yet further, the advertisingserver and the billing server may cooperate in such a manner that theadvertising server's operator sells advertisement space or time and theadvertising server credits the client terminal's subscriber for anyadvertisements received. The credits are then relayed to and used by thebilling server in order to reduce the client terminal's subscriber'sinvoice, generate additional services, extend pre-paid subscriptiontime, to name just a few examples.

Finally, the gateway application may be configured to convey the mobilestation's location, or some derivative it, to the advertising server fortargeted or tailored advertising on the basis of the mobile station'slocation. For instance, targeted advertising for some goods or servicemay include sending an advertisement to a client terminal only if themobile station's location indicates that the client terminal isreasonably close to the outlet of the goods or service. On the otherhand, tailored advertising may be implemented such that theadvertisement indicates the address or location of the closest outlet.

FIGS. 4 and 5 illustrate some exemplary embodiments in which the presentinvention benefits from the functionality of modern mobile stations,such that the resulting WLAN gateway is functionally superior todedicated WLAN base stations. FIG. 4 shows an embodiment in which theWLAN circuitry, and optionally the WLAN gateway application, in themobile station MS is activated periodically to detect possible WLANclient terminals CT nearby. In one representative scenario, aWLAN-capable digital camera acts as a WLAN client terminal. In theembodiment shown in FIG. 4, the mobile station MS employs two timerswhich may be realized by means of software-implemented tick counters, asis well known to those skilled in the art. One of the timers is called asleep timer while the other is called a watchdog timer. The sleeptimer's function is to periodically wake up the mobile station's WLANcircuitry, and optionally the WLAN gateway application. The watchdogtimer is used to detect non-activity periods of predetermined length inthe WLAN network so that the WLAN circuitry can be powered off in orderto optimise battery resources.

In step 41 the WLAN circuitry of the mobile station MS is powered offand the execution of the WLAN gateway application may be suspended orterminated. Step 41 terminates when the sleep timer expires. Forinstance, the sleep timer may generate a processor interrupt whichdirects the mobile station's processor to perform program routines foractivating the WLAN circuitry and starting or resuming execution of theWLAN gateway application. After step 42 the mobile station hasestablished a WLAN network. In step 43 the mobile station checks if anyclient terminal(s), such as the exemplary digital camera, attempt(s) toattach to the WLAN network. If not, the process proceeds to step 48, inwhich the WLAN network and circuitry are deactivated and the processbegins anew at step 41. On the other hand, if any client terminalattaches to the WLAN network, the mobile station starts a watchdog timerin step 44 and maintains the WLAN network as indicated in step 45. Step46 includes a test to detect client terminal activity. If clientterminal activity is detected, the process returns to step 44 in whichthe watchdog timer is restarted. Naturally, any client-related requestsare served as well, as part of the basic functionality of the WLANgateway application. On the other hand, if no client terminal activityis detected, the process proceeds to step 47 which is a test as towhether the watchdog timer has expired. If not, the process returns tostep 45 in which the WLAN network is maintained without restarting thewatchdog timer. Eventually, a moment occurs when no client activity hasbeen detected and the watchdog timer expires, and this is detected instep 47. Then, in step 48, the WLAN network and circuitry aredeactivated and the process begins anew at step 41.

By virtue of the embodiment described in connection with FIG. 4, theWLAN gateway application may terminate its own execution and power offthe mobile station's WLAN circuitry. The automatic execution of thegateway application and the accompanying automatic activation of themobile station's WLAN circuitry provides certain benefits. For instance,both digital cameras and mobile stations are handicapped by small userinterfaces and relatively short battery life, particularly when theirliquid-crystal displays (LCD) are illuminated. The automation describedin connection with the present embodiment alleviates such handicaps.

FIG. 5 shows an embodiment in which the mobile station'slocation-determination functionality is used to enhance image uploadingto an image hosting server. In step 5-0 a WLAN connection is establishedbetween the gateway application being executed in the mobile station MSand the WLAN-equipped digital camera CAM acting as a client terminal CT.For details of the WLAN connection establishment a reference is made toFigures 3 and 4. In step 5-2 the camera CAM/CT initiates a DNS inquiryto obtain the internet address of the image hosting server. In step 5-4an embodiment of the gateway application being executed in the mobilestation MS detects that the camera/client terminal CAM/CT executes alocation-aware application. Accordingly, the gateway application usesthe mobile station's location-determination functionality to determinethe mobile station's location. For instance, the mobile station'slocation may be determined on the basis of the mobile station's built-insatellite-positioning device (GPS) or on the basis of cell IDdetermination in the access networks. In an optional step 5-8, thegateway application sends the mobile station's location to an embodimentof the supplementary server SS, which in this scenario receives themobile station's location and returns a plaintext-formatted locationdescription. For instance, the geographical coordinates or cell ID ofPiccadilly Circus might be converted to a plaintext description of“Piccadilly Circus, London”. In step 5-10, the camera/client terminalCAM/CT begins uploading of image data to the image hosting server. Instep 5-12 the gateway application complements the image data with themobile station's location. In one particular implementation, thelocation data is placed in a metadata field of the image(s).

It is readily apparent to a person skilled in the art that, as thetechnology advances, the inventive concept can be implemented in variousways. The invention and its embodiments are not limited to the examplesdescribed above but may vary within the scope of the claims.

1. A mobile station comprising: a memory (MEM, 110) for storingapplications and data; a processor (105) for executing the storedapplications; a user interface (115) comprising an input section (120)and an output section (125); reception/transmission circuitry (110) forproviding a communication interface to one or more access networks (AN);authentication means (150, 160) operable to authenticate a user of themobile station; a radio transceiver operable (110) to establish andmaintain a broadband connection with a mobile communication network inresponse to a successful authentication of the user of the mobilestation; wireless local-area network [“WLAN”] means (155) responsive toan activation or deactivation command according to a setting receivedvia the input section (120) of the user interface (125); wherein thememory (MEM, 110) comprises a gateway application (170) which comprises:a first code portion for instructing the processor to activate (3-0) theWLAN means as a WLAN base station capable of communicating with at leastone WLAN terminal over a WLAN network; a second code portion forinstructing the processor to create a network identifier (3-2, 3-4) forthe WLAN base station; a third code portion for instructing theprocessor to assign (3-8, 3-10) an internet protocol address for the atleast one WLAN terminal; a fourth code portion for instructing theprocessor to resolve domain name service [“DNS”] queries (3-12 . . .3-18) in cooperation with an external DNS service system; a fifth codeportion for instructing the processor to assign at least one port numberfor each protocol supported by the gateway application; and a sixth codeportion for instructing the processor to tunnel internet traffic (3-30 .. . 3-36) between the at least one WLAN terminal and an internet hostover the broadband connection.
 2. A mobile station according to claim 1,further comprising means for receiving, installing and executing one ormore downloadable programs and wherein the gateway application is adownloadable application.
 3. A mobile station according to claim 1,wherein the gateway application further comprises a seventh code portionto redirect a first HTTP page request (3-20) from each mobile stationduring an internet session to a predetermined internet address.
 4. Amobile station according to claim 1, wherein the mobile stationcomprises means (5-6) for determining a location of the mobile stationand the gateway application further comprises a code portion forassociating the determined location to the tunnelled internet traffic.5. A mobile station according to claim 4, wherein the gatewayapplication further comprises a code portion for providing one or moreadditional services to the WLAN terminal based on the determinedlocation.
 6. A mobile station according to claim 1, wherein the gatewayapplication further comprises a code portion for collecting trafficstatistics in respect of the tunnelled traffic and for transmitting atleast a portion of the collected traffic statistics to a supplementaryserver.
 7. A mobile station according to claim 1, further comprising:means (41, 42) for periodically activating the WLAN means; and means(48) for deactivating the WLAN means in response to a detected absenceof WLAN terminal activity (44-47) for a predetermined period of time. 8.A method for operating a mobile station; wherein the mobile stationcomprises a memory (MEM, 110) for storing applications and data; aprocessor (105) for executing the stored applications; a user interface(115) comprising an input section (120) and an output section (125);reception/transmission circuitry (110) for providing a communicationinterface to one or more access networks (AN); authentication means(150, 160) operable to authenticate a user of the mobile station; aradio transceiver operable (110) to establish and maintain a broadbandconnection with a mobile communication network in response to asuccessful authentication of the user of the mobile station; andwireless local-area network [“WLAN”] means (155) responsive to anactivation or deactivation command according to a setting received viathe input section (120) of the user interface (125); wherein the methodcomprises instructing the processor (105) by a gateway application (170)to control the following operations: activating (3-0) the WLAN means asa WLAN base station capable of communicating with at least one WLANterminal over a WLAN network; creating a network identifier (3-2, 3-4)for the WLAN base station; assigning (3-8, 3-10) an internet protocoladdress for the at least one WLAN terminal; resolving domain nameservice [“DNS”] queries (3-12 . . . 3-18) in cooperation with anexternal DNS service system; assigning at least one port number for eachprotocol supported by the gateway application; and tunneling internettraffic (3-30 . . . 3-36) between the at least one WLAN terminal and aninternet host over the broadband connection.
 9. A software applicationfor a mobile station, wherein the mobile station comprises a memory(MEM, 110) for storing applications and data; a processor (105) forexecuting the stored applications; a user interface (115) comprising aninput section (120) and an output section (125); reception/transmissioncircuitry (110) for providing a communication interface to one or moreaccess networks (AN); authentication means (150, 160) operable toauthenticate a user of the mobile station; a radio transceiver operable(110) to establish and maintain a broadband connection with a mobilecommunication network in response to a successful authentication of theuser of the mobile station; and wireless local-area network [“WLAN”]means (155) responsive to an activation or deactivation commandaccording to a setting received via the input section (120) of the userinterface (125); wherein the software application is a gatewayapplication (170) which comprises: a first code portion for instructingthe processor to activate (3-0) the WLAN means as a WLAN base stationcapable of communicating with at least one WLAN terminal over a WLANnetwork; a second code portion for instructing the processor to create anetwork identifier (3-2, 3-4) for the WLAN base station; a third codeportion for instructing the processor to assign (3-8, 3-10) an internetprotocol address for the at least one WLAN terminal; a fourth codeportion for instructing the processor to resolve domain name service[“DNS”] queries (3-12 . . . 3-18) in cooperation with an external DNSservice system; a fifth code portion for instructing the processor toassign at least one port number for each protocol supported by thegateway application; and a sixth code portion for instructing theprocessor to tunnel internet traffic (3-30 . . . 3-36) between the atleast one WLAN terminal and an internet host over the broadbandconnection.